Page 1 of 1
User history
Posted: Thu Jun 18, 2020 1:45 am
by jabi27
Hi
How can I create - if possible ? - a list showing user activity? Login / out etc ?
Best
/Jan
Re: User history
Posted: Thu Jun 18, 2020 1:13 pm
by jbrunkow
I believe that you may find the information you are looking for in the
access log. Run the following command from your
XI server connection to print the contents of that log to the terminal.
This is the Apache access log. Failed authentications, ajax requests and page views will log here.
NAGIOS LOGS
Re: User history
Posted: Thu Jun 18, 2020 2:31 pm
by jabi27
Hi
Thanks. There is no access file. We might missed that on the installation?. Where should we enable this to comply with Nagios settings ?
---------------------------------------
root@nagios-logserver2:/etc/apache2/sites-enabled# cat nagioslogserver.conf
DocumentRoot /var/www/html
Alias /nagioslogserver "/var/www/html/nagioslogserver/www/"
<Directory "/var/www/html/nagioslogserver/www/">
Options FollowSymLinks
AllowOverride All
Require all granted
</Directory>
RewriteEngine on
RewriteCond $1 !^(index\.php|scripts|media|app|js|css|img|font|vendor|config.js)
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule nagioslogserver/(.*)$ /var/www/html/nagioslogserver/www/index.php/$1 [L,QSA]
-------------------------------------------------
Best
/Jan
Re: User history
Posted: Thu Jun 18, 2020 4:01 pm
by jbrunkow
I'm sorry, I was looking at
XI by mistake.
Do you see any access logs in
/var/log/httpd?
Re: User history
Posted: Thu Jun 18, 2020 11:12 pm
by jabi27
I see it but it is emty:
Code: Select all
cd /var/log/apache2
root@nagios-logserver2:/var/log/apache2# ls -l access.log
-rw-r----- 1 root adm 0 Feb 9 2019 access.log
Best
/Jan
Re: User history
Posted: Fri Jun 19, 2020 9:32 am
by jbrunkow
Please try this command to look in some other locations that
Apache commonly puts the access log.
This command will look in the configuration files to see what access log is defined there.
Code: Select all
cat /usr/local/etc/apache22/httpd.conf /etc/apache2/apache2.conf /etc/httpd/conf/httpd.conf | grep CustomLog
You could also locate it using the command below.
Apparently the access log location varies based on what operating system you have running. The following are the default locations for a few Linux distributions that are commonly used as servers.
RHEL / Red Hat / CentOS / Fedora
Debian / Ubuntu
FreeBSD
I hope that helps!
Re: User history
Posted: Fri Jun 19, 2020 10:13 am
by jabi27
Hi
root@nagios-logserver2:~# cat /usr/local/etc/apache22/httpd.conf /etc/apache2/apache2.conf /etc/httpd/conf/httpd.conf | grep CustomLog
cat: /usr/local/etc/apache22/httpd.conf: No such file or directory
cat: /etc/httpd/conf/httpd.conf: No such file or directory
# a CustomLog directive.
root@nagios-logserver2:~#
--- can I phone somebody at the support ? This is not good and our DPO ... are banning Nagios...
Best
/Jan
Re: User history
Posted: Fri Jun 19, 2020 2:34 pm
by benjaminsmith
Hi Jan,
How can I create - if possible ? - a list showing user activity? Login / out etc ?
My apologies for the inconvenience here, and happy to help you get this worked out.
Does the Audit Log Report meet your requirements? Go to Admin > Reports > Audit Log and use the SECURITY filter to pull details on user activity (see attached screenshot).
If not please let know what other information you're trying to pull.
Regards,
Benjamin
Re: User history
Posted: Sat Jun 20, 2020 12:19 am
by jabi27
Hi
Thanks,
Exactly
Best
/Jan
Re: User history
Posted: Mon Jun 22, 2020 10:18 am
by benjaminsmith
Hi Jan,
Excellent!
We'll go ahead and mark this as resolved, but feel free to open another post if you have any new questions.